6,765 results · Clear filters · Feed
-
Medium max 5.4SUSE-SU-2026:4128-1 1 CVE
Security update for php7
This update for php7 fixes the following issue: - CVE-2026-7260: Stack overflow in phar with circular symlinks (bsc#1273077). Other changes: - Allow removal of apache2-mod_php7 even if the php7 module is not enabled (bsc#1205782, bsc#1276531).
first Sep 11, 2026 -
Medium max 5.1SUSE-SU-2026:23520-1 1 CVE
Security update for wget
This update for wget fixes the following issue: - CVE-2026-16599: server-controlled unbounded MD5 loop in FTP OPIE (bsc#1276962).
first Sep 4, 2026 -
Medium max 6.2SUSE-SU-2026:23519-1 2 CVEs
Security update for libusb-1_0
This update for libusb-1_0 fixes the following issues: - CVE-2026-23679: NULL pointer dereference in `parse_interface()` allows attackers to crash applications by supplying a malformed USB configuration descriptor (bsc#1266664). - CVE-2026-47104: one-byte out…
first Sep 3, 2026 -
Medium max 6.5SUSE-SU-2026:23518-1 1 CVE
Security update for rpcbind
This update for rpcbind fixes the following issue: - CVE-2026-16461: stack buffer overflow in rpcinfo rpcbdump() short-mode version-list formatting (bsc#1272340).
first Sep 3, 2026 -
Medium max 5.5openSUSE-SU-2026:21839-1 1 CVE
Security update for gimp
This update for gimp fixes the following issues: Changes in gimp: - CVE-2026-66757: Fixed signed integer overflow in `file-sgi` causes the plugin to crash when RLE-compressed SGI images are processed (bsc#1279838).
first Sep 14, 2026 -
Medium max 6.7SUSE-SU-2026:4181-1 2 CVEs
Security update for NetworkManager
This update for NetworkManager fixes the following issues: - CVE-2025-9615: avoid non-admin user using other users' certificate (bsc#1257359). - CVE-2026-10805: Local privilege escalation via malformed MUD URLs in dhclient backend (bsc#1267696).
-
Medium max 5.1SUSE-SU-2026:4145-1 1 CVE
Security update for python-sqlparse
This update for python-sqlparse fixes the following issue: - CVE-2026-84305: Reindentation of tuple lists causes near-cap quadratic CPU consumption (bsc#1278097).
first Sep 14, 2026 -
Medium max 6.1openSUSE-SU-2026:11780-1 1 CVE
python313-autobahn-26.7.1-1.1 on GA media
These are all security issues fixed in the python313-autobahn-26.7.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 14, 2026 -
Medium max 6.9openSUSE-SU-2026:11782-1 1 CVE
znc-1.10.3-1.1 on GA media
These are all security issues fixed in the znc-1.10.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 14, 2026 -
Medium max 5.3openSUSE-SU-2026:11776-1 1 CVE
kubernetes1.36-apiserver-1.36.4-2.1 on GA media
These are all security issues fixed in the kubernetes1.36-apiserver-1.36.4-2.1 package on the GA media of openSUSE Tumbleweed.
first Sep 14, 2026 -
Medium max 5.3openSUSE-SU-2026:11775-1 1 CVE
kubernetes1.35-apiserver-1.35.8-2.1 on GA media
These are all security issues fixed in the kubernetes1.35-apiserver-1.35.8-2.1 package on the GA media of openSUSE Tumbleweed.
first Sep 14, 2026 -
Medium max 5.3openSUSE-SU-2026:11774-1 1 CVE
kubernetes1.34-apiserver-1.34.11-2.1 on GA media
These are all security issues fixed in the kubernetes1.34-apiserver-1.34.11-2.1 package on the GA media of openSUSE Tumbleweed.
first Sep 14, 2026 -
Medium max 5.1SUSE-SU-2026:4109-1 1 CVE
Security update for python-sqlparse
This update for python-sqlparse fixes the following issue: - CVE-2026-84305: Reindentation of tuple lists causes near-cap quadratic CPU consumption (bsc#1278097).
first Sep 9, 2026 -
Medium max 6.8SUSE-SU-2026:23496-1 2 CVEs
Security update for mcphost
This update for mcphost fixes the following issues: - CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs (bsc#1276612). - CVE-2026-81092: github.com/mark3labs/mcp-go/serv…
first Sep 6, 2026 -
Medium max 6.9SUSE-SU-2026:4113-1 2 CVEs
Security update for python-aiohttp
This update for python-aiohttp fixes the following issues: - CVE-2026-59881: excessive resource consumption due to WebSocket client accepting compressed frames without negotiated permessage-deflate (bsc#1273125). - CVE-2026-69243: HTTP request smuggling via t…
first Sep 9, 2026 -
Medium max 5.4SUSE-SU-2026:4111-1 1 CVE
Security update for python-Authlib
This update for python-Authlib fixes the following issue: - CVE-2026-41479: crafted authorization requests with unsupported response_types can cause unauthenticated open redirects (bsc#1275231).
first Sep 9, 2026 -
Medium max 4.2SUSE-SU-2026:4105-1 1 CVE
Security update for libsoup
This update for libsoup fixes the following issue: - CVE-2026-12548: out-of-bounds read in multipart body parser due to an integer truncation (bsc#1272196).
first Sep 9, 2026 -
Medium max 6.2SUSE-SU-2026:23501-1 2 CVEs
Security update for libusb-1_0
This update for libusb-1_0 fixes the following issues: - CVE-2026-23679: NULL pointer dereference in `parse_interface()` allows attackers to crash applications by supplying a malformed USB configuration descriptor (bsc#1266664). - CVE-2026-47104: one-byte out…
first Sep 7, 2026 -
Medium max 6.5SUSE-SU-2026:23495-1 1 CVE
Security update for rpcbind
This update for rpcbind fixes the following issue: - CVE-2026-16461: stack buffer overflow in rpcinfo rpcbdump() short-mode version-list formatting (bsc#1272340).
first Sep 6, 2026 -
Medium max 4.8SUSE-SU-2026:23494-1 1 CVE
Security update for bzip2
This update for bzip2 fixes the following issue: - CVE-2026-42250: off-by-one error in the `bzip2recover` utility when processing a specially crafted file can lead to a crash (bsc#1266786).
first Sep 4, 2026 -
Medium max 6.7SUSE-SU-2026:23470-1 4 CVEs
Security update for systemd
This update for systemd fixes the following issue: Security issue fixed: - CVE-2026-16742: `systemd-homed`: local privilege escalation due to missing home record signature verification on the authentication path (bsc#1271444). Non security issue fixed: - `sys…
first Sep 3, 2026 -
Medium max 5.5SUSE-SU-2026:23465-1 3 CVEs
Security update for sssd
This update for sssd fixes the following issues: Security issues fixed: - CVE-2026-68742: insufficient validation in the NSS responder can lead to an out-of-bounds read and a process crash when a crafted GETHOSTBYADDR request is sent to the NSS responder sock…
first Sep 3, 2026 -
Medium max 4.6SUSE-SU-2026:23464-1 3 CVEs
Security update for cpio
This update for cpio fixes the following issues: - CVE-2026-66484: improper sanitization in the tar archive extraction functionality allows for the creation of hard links outside intended directory via malicious tar archives (bsc#1274856). - CVE-2026-66485: i…
first Sep 3, 2026 -
Medium max 5.1SUSE-SU-2026:23455-1 1 CVE
Security update for wget
This update for wget fixes the following issue: - CVE-2026-16599: server-controlled unbounded MD5 loop in FTP OPIE (bsc#1276962).
first Sep 4, 2026 -
Medium max 6.7SUSE-SU-2026:23454-1 4 CVEs
Security update for systemd
This update for systemd fixes the following issue: Security issue fixed: - CVE-2026-16742: `systemd-homed`: local privilege escalation due to missing home record signature verification on the authentication path (bsc#1271444). Non security issue fixed: - `sys…
first Sep 3, 2026 -
Medium max 6.5SUSE-SU-2026:23451-1 1 CVE
Security update for rpcbind
This update for rpcbind fixes the following issue: - CVE-2026-16461: stack buffer overflow in rpcinfo rpcbdump() short-mode version-list formatting (bsc#1272340).
first Sep 3, 2026 -
Medium max 6.2SUSE-SU-2026:23450-1 2 CVEs
Security update for libusb-1_0
This update for libusb-1_0 fixes the following issues: - CVE-2026-23679: NULL pointer dereference in `parse_interface()` allows attackers to crash applications by supplying a malformed USB configuration descriptor (bsc#1266664). - CVE-2026-47104: one-byte out…
first Sep 3, 2026 -
Medium max 5.1SUSE-SU-2026:23446-1 5 CVEs
Security update for busybox
This update for busybox fixes the following issues: - CVE-2023-42366: heap buffer overflow in the `next_token` function of `editors/awk.c` (bsc#1217586). - CVE-2026-38752: stack buffer overflow in the `evaluate()` function of `editors/awk.c` (bsc#1271544). - …
first Sep 2, 2026 -
Medium max 4.0SUSE-SU-2026:23443-1 2 CVEs
Security update for lcms2
This update for lcms2 fixes the following issues: - CVE-2026-41254: Information disclosure or denial of service via integer overflow in CubeSize (bsc#1264994). - CVE-2026-42798: Little CMS (lcms2) 2.16 through 2.18 before 2.19 has an integer overflow in Parse…
first Sep 1, 2026 -
Medium max 4.8SUSE-SU-2026:23442-1 1 CVE
Security update for bzip2
This update for bzip2 fixes the following issue: - CVE-2026-42250: off-by-one error in the bzip2recover utility when processing a specially crafted file can lead to a crash (bsc#1266786).
first Sep 1, 2026 -
Medium max 4.6SUSE-SU-2026:23441-1 3 CVEs
Security update for cpio
This update for cpio fixes the following issues: Security issues fixed: - CVE-2026-66484: improper sanitization in the tar archive extraction functionality allows for the creation of hard links outside intended directory via malicious tar archives (bsc#127485…
first Aug 31, 2026 -
Medium max 4.8SUSE-SU-2026:23415-1 1 CVE
Security update for bzip2
This update for bzip2 fixes the following issue: - CVE-2026-42250: off-by-one error in the bzip2recover utility when processing a specially crafted file can lead to a crash (bsc#1266786).
first Sep 1, 2026 -
Medium max 6.5SUSE-SU-2026:4075-1 1 CVE
Security update for rpcbind
This update for rpcbind fixes the following issue: - CVE-2026-16461: stack buffer overflow in rpcinfo rpcbdump() short-mode version-list formatting (bsc#1272340).
first Sep 8, 2026 -
Medium max 4.0SUSE-SU-2026:4081-1 1 CVE
Security update for libidn
This update for libidn fixes the following issue: - CVE-2026-57053: out-of-bounds read in ToUnicode APIs (bsc#1268965).
first Sep 8, 2026 -
Medium max 6.2SUSE-SU-2026:4080-1 1 CVE
Security update for libusb-1_0
This update for libusb-1_0 fixes the following issue: - CVE-2026-23679: NULL pointer dereference in `parse_interface()` allows attackers to crash applications by supplying a malformed USB configuration descriptor (bsc#1266664).
first Sep 8, 2026 -
Medium max 5.1SUSE-SU-2026:4074-1 1 CVE
Security update for wget
This update for wget fixes the following issue: - CVE-2026-16599: server-controlled unbounded MD5 loop in FTP OPIE (bsc#1276962).
first Sep 8, 2026 -
Medium max 6.5SUSE-SU-2026:4070-1 1 CVE
Security update for perl-URI
This update for perl-URI fixes the following issue: - CVE-2026-19953: non-NFC host names encoded to non-standard punycode labels due to missing normalization in `nameprep` (bsc#1277886).
first Sep 8, 2026 -
Medium max 5.6SUSE-SU-2026:4061-1 3 CVEs
Security update for python
This update for python fixes the following issues: Security issues fixed: - CVE-2026-13346: pip: arbitrary file installation via malicious package indexes (bsc#1273091). Non security issue fixed: - Update bundled pip wheels to pip-10.0.1-py2.py3-none-any.whl
first Sep 8, 2026 -
Medium max 5.6SUSE-SU-2026:4060-1 3 CVEs
Security update for python3
This update for python3 fixes the following issues: Security issues fixed: - CVE-2026-13346: arbitrary file installation via malicious package indexes (bsc#1273091). Non security issue fixed: - Update bundled pip wheels to pip-10.0.1-py2.py3-none-any.whl
first Sep 8, 2026 -
Medium max 4.0SUSE-SU-2026:4056-1 1 CVE
Security update for lcms2
This update for lcms2 fixes the following issue: - CVE-2026-41254: Information disclosure or denial of service via integer overflow in CubeSize (bsc#1264994).
first Sep 7, 2026